637b73c79fb6a16c0f373b2a240dca2aaebfe63cfe42b052a503f26b8a946cb1

Analysis

max time kernel
150s
max time network
123s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/06/2026, 03:59

Target
2026-06-29_c16152693f51e90bb5e06f872445c05e_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe
Size 8.9MB
Sample260630-ej4byad19t
SHA256 637b73c79fb6a16c0f373b2a240dca2aaebfe63cfe42b052a503f26b8a946cb1
MD5 c16152693f51e90bb5e06f872445c05e
SHA1 be8e3bf011d4e6c95cdaa1dd8a78a83c3dc1b4d3
SHA512 4c0c689fd508f4eda605ab9e455d818d7868270a0b0ef272a9fbe3a5d757b0b8bc6857c226fe04ee76be18ea0151d9ea949973edcb370d7a45af8c77fde8ef11
SSDEEP 98304:gB568rV/wdODB7zEIslgyZVzx7ZOKQfVPBLzNJ/7HFxSNr0VErk/+/Q2:gBk8CdODB7gJxtZE9PBxGwVKSu
TLSH
T18A969C03EDA545E9C0AAE235C9A292537A717C494B3163DB3B50F7382F73BD06AB9740
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4532	2026-06-29_c16152693f51e90bb5e06f872445c05e_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe
4532	2026-06-29_c16152693f51e90bb5e06f872445c05e_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe
4532	2026-06-29_c16152693f51e90bb5e06f872445c05e_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe
4532	2026-06-29_c16152693f51e90bb5e06f872445c05e_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-29_c16152693f51e90bb5e06f872445c05e_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-29_c16152693f51e90bb5e06f872445c05e_coinminer_dosia_frostygoop_ghostlocker_glassworm_hive_kn.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4532